openssl req -x509 -newkey rsa:4096 -sha256 -nodes \
  -keyout spinsect.shop.key -out spinsect.shop.crt -subj "/CN=spinsect.shop" \
  -days 3650 -addext "subjectAltName=DNS:spinsect.shop,IP:101.43.25.130"